Recorded Future’s “New ransomware tactics in 2026” 7 Jan 2026 | Enterprise Security, Third-Party Content, Threat Intelligence Declining payments, evolving tactics: Ransomware groups made less money in 2025 despite a 47% increase in publicly reported attacks, pushing them to adopt new approaches to extract payment, namely, DDoS-as-a-Service offerings, insider recruitment, and gig worker exploitation (published January 2026).
